Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer (raw, json)
Hash identifier: 01px0xkKEdr4c1slDcjQjYvQumcPT6CY+JZd9dhM8ZM=
Subject key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBB6029F1A02DA2405B86F95ED9DC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.73.251.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b6:02:9f:1a:02:da:24:05:b8:6f:95:ed:9d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:29:ef:0e:27:86:8c:d0:1b:ac:b9:82:20:
c5:0a:eb:45:50:f9:05:cc:65:96:2e:16:63:6c:9e:
3c:20:16:da:c1:4b:1d:d9:9e:0f:4c:68:49:59:a0:
87:68:17:ca:92:09:00:4e:7a:26:98:46:7c:a2:3b:
14:ba:56:21:a1:64:d4:ae:07:d8:27:77:a9:5e:b5:
4a:d0:6a:7b:8a:bd:c0:0d:5b:4f:9c:be:99:64:b5:
77:35:4e:b6:db:6a:18:e4:77:40:22:3e:d6:91:3a:
ca:57:ff:ae:e4:f9:65:71:0a:35:11:9e:eb:22:8b:
c8:23:2d:11:31:6e:71:5c:e1:1e:c5:24:60:02:7c:
18:2a:0d:7a:ee:0b:f5:95:52:9a:35:af:05:90:29:
44:bb:1f:4c:69:b0:d7:4a:9f:6d:04:ff:70:3c:71:
0a:d8:fd:e9:de:c2:33:8f:58:b4:d1:c0:ea:0a:b8:
d9:9f:66:30:d5:74:f9:53:f1:a2:01:55:12:ed:7e:
6d:7a:d9:91:8d:cc:35:0d:e6:b6:2e:6c:01:fd:a3:
97:5f:86:13:93:1c:c0:ff:12:12:e7:6d:7c:f4:5d:
a4:b8:c6:3d:ed:1f:25:a8:dd:97:cb:b2:54:a1:53:
91:7b:32:7d:01:9a:75:ab:f1:30:d0:8c:00:65:14:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.251.0/24
Signature Algorithm: sha256WithRSAEncryption
38:67:25:a8:45:79:95:87:16:31:ca:89:7a:11:a9:ef:f5:87:
5e:8e:41:a0:ce:88:94:02:ba:af:92:00:6d:79:2c:c2:e2:c7:
e6:ec:82:eb:ec:a1:9e:9d:3a:4b:eb:62:60:b7:e9:93:0c:bf:
c8:57:5d:fa:33:33:44:50:16:63:b0:d5:1f:f7:85:a7:a4:75:
1f:2a:7a:5b:22:1e:ac:3d:46:32:94:49:92:84:95:02:fe:91:
8f:3d:e6:ce:70:d4:f1:52:a1:5f:fe:0f:71:65:b7:f5:60:68:
83:74:af:22:6d:88:51:83:7c:e4:40:e6:77:e4:e7:76:67:cc:
7d:ab:92:44:5a:2d:2b:39:bf:ae:d6:f1:53:6d:1a:3b:19:48:
23:79:3d:a6:7e:9b:f6:ad:05:a3:6d:9d:e1:10:5d:66:67:1b:
bd:c1:bb:ef:b5:60:16:dd:27:01:6b:75:85:ce:a3:5f:29:d0:
f4:c6:d3:54:00:1c:1b:40:12:b7:da:57:2d:c8:8a:21:f6:73:
03:66:5a:3f:d7:bc:ab:ff:98:9c:22:7a:16:ce:18:6c:e3:bc:
c4:c5:a9:6f:cd:8d:c2:28:64:11:e4:1d:5e:e6:25:8c:c7:94:
eb:18:e0:fc:53:c7:85:a3:1c:c7:d5:a8:a2:99:d8:ef:50:49:
c3:50:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:29:56 2025 by rpki-client